1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
# Copyright (c) 2018 Peter Wu <peter@lekensteyn.nl>
#
# SPDX-License-Identifier: GPL-2.0-or-later
import pytest
from suite_dfilter.dfiltertest import *
class TestDfilterMembership:
trace_file = "http.pcap"
def test_membership_match_1(self, checkDFilterCount):
dfilter = 'tcp.port in {80, 3267}'
checkDFilterCount(dfilter, 1)
def test_membership_match_2(self, checkDFilterCount):
dfilter = 'tcp.port in {80,3267}'
checkDFilterCount(dfilter, 1)
def test_membership_match_3(self, checkDFilterCount):
dfilter = 'tcp.port in {80 ,3267}'
checkDFilterCount(dfilter, 1)
def test_membership_match_4(self, checkDFilterCount):
dfilter = 'tcp.port in {80 , 3267}'
checkDFilterCount(dfilter, 1)
def test_membership_match_5(self, checkDFilterCount):
dfilter = 'tcp.port in { 80 , 3267 }'
checkDFilterCount(dfilter, 1)
def test_membership_any_1(self, checkDFilterCount):
dfilter = 'any tcp.port in {80, 3267}'
checkDFilterCount(dfilter, 1)
def test_membership_any_2(self, checkDFilterCount):
dfilter = 'any tcp.port in {70, 80, 90}'
checkDFilterCount(dfilter, 1)
def test_membership_all_1(self, checkDFilterCount):
dfilter = 'all tcp.port in {80, 3267}'
checkDFilterCount(dfilter, 1)
def test_membership_all_2(self, checkDFilterCount):
dfilter = 'all tcp.port in {70, 80, 90}'
checkDFilterCount(dfilter, 0)
def test_membership_range_match_1(self, checkDFilterCount):
dfilter = 'tcp.port in {80..81}'
checkDFilterCount(dfilter, 1)
def test_membership_range_match_2(self, checkDFilterCount):
dfilter = 'tcp.port in {80 ..81}'
checkDFilterCount(dfilter, 1)
def test_membership_range_match_3(self, checkDFilterCount):
dfilter = 'tcp.port in {80.. 81}'
checkDFilterCount(dfilter, 1)
def test_membership_range_match_4(self, checkDFilterCount):
dfilter = 'tcp.port in {80 .. 81}'
checkDFilterCount(dfilter, 1)
def test_membership_3_range_no_match(self, checkDFilterCount):
dfilter = 'tcp.dstport in {1 .. 79, 81 .. 65535}'
checkDFilterCount(dfilter, 0)
def test_membership_4_range_no_match_multiple(self, checkDFilterCount):
# Verifies that multiple fields cannot satisfy different conditions.
dfilter = 'tcp.port in {1 .. 79,81 .. 3266,3268 .. 65535}'
checkDFilterCount(dfilter, 0)
def test_membership_5_negative_range_float(self, checkDFilterCount):
dfilter = 'frame.time_delta in {-2.0 .. 0.0}'
checkDFilterCount(dfilter, 1)
def test_membership_6_both_negative_range_float(self, checkDFilterCount):
dfilter = 'frame.time_delta in {-20 .. -0.7}'
checkDFilterCount(dfilter, 0)
def test_membership_7_string(self, checkDFilterCount):
dfilter = 'http.request.method in {"GET", "HEAD"}'
checkDFilterCount(dfilter, 1)
def test_membership_8_ip_range(self, checkDFilterCount):
dfilter = 'ip.addr in { 10.0.0.5 .. 10.0.0.9 , 10.0.0.1..10.0.0.1 }'
checkDFilterCount(dfilter, 1)
def test_membership_9_range_invalid_float(self, checkDFilterFail):
# expression should be parsed as "0.1 .. .7"
# .7 is the identifier (protocol) named "7"
dfilter = 'frame.time_delta in {0.1...7}'
error = '"7" is not a valid protocol or protocol field'
checkDFilterFail(dfilter, error)
def test_membership_10_bad_lhs_number(self, checkDFilterFail):
dfilter = '123 in {ip}'
error = 'Only a field may be tested for membership in a set.'
checkDFilterFail(dfilter, error)
def test_membership_11_bad_rhs_string(self, checkDFilterFail):
dfilter = 'frame.number in {1, "foo"}'
error = 'Unsigned integer (32 bits) cannot be converted from a string'
checkDFilterFail(dfilter, error)
def test_membership_12_value_string(self, checkDFilterCount):
dfilter = 'tcp.checksum.status in {"Unverified", "Good"}'
checkDFilterCount(dfilter, 1)
def test_membership_arithmetic_1(self, checkDFilterCountWithSelectedFrame):
dfilter = 'frame.time_epoch in {${frame.time_epoch}-46..${frame.time_epoch}+43}'
checkDFilterCountWithSelectedFrame(dfilter, 1, 1)
def test_membership_bad_rhs_string_2(self, checkDFilterFail):
dfilter = 'eth.src in {11:12:13:14:15:16, 22-33-}'
error = 'Error: "22-33-" is not a valid protocol or protocol field.'
checkDFilterFail(dfilter, error)
|
